Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1MeepRR6G3jO0QI2vxAN8ZiQIxk.roa
File: 1MeepRR6G3jO0QI2vxAN8ZiQIxk.roa (raw, json)
Hash identifier: eKsR1zqFXn7znEsgDtm1p5mhYAARYduztsp/yLT4DRk=
Subject key identifier: D4:C7:9E:A5:14:7A:1B:78:CE:D1:02:36:BF:10:0D:F1:98:90:23:19
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0193D210E46BC0B7BDE0CFF4B4A2B7B99F50
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1MeepRR6G3jO0QI2vxAN8ZiQIxk.roa
Signing time: Tue 17 Dec 2024 00:42:22 +0000
ROA not before: Tue 17 Dec 2024 00:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54801
IP address blocks: 46.8.124.0/24 maxlen: 24
46.8.126.0/24 maxlen: 24
109.248.16.0/21 maxlen: 24
109.248.24.0/22 maxlen: 24
109.248.28.0/22 maxlen: 24
188.130.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:10:e4:6b:c0:b7:bd:e0:cf:f4:b4:a2:b7:b9:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Dec 17 00:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c79ea5147a1b78ced10236bf100df198902319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:7d:8b:82:45:7d:5b:5e:bb:94:62:61:57:
2c:da:13:77:f3:9c:d4:f1:ec:c2:5b:c1:d7:5b:e0:
9f:de:54:fd:bf:e9:3d:bb:d4:2c:49:81:08:95:e8:
b3:36:c5:97:a3:4f:4d:74:20:b6:95:e8:5c:6c:42:
bf:2c:29:f1:4f:f2:3f:2d:56:4e:72:72:37:e3:9d:
52:3c:60:4e:25:5d:ac:56:8b:cc:b6:e1:3e:7e:5e:
2c:68:fb:e2:ce:57:72:f2:bb:34:eb:d6:e9:e2:03:
db:5f:35:b5:9c:c8:3c:e9:df:c9:8b:56:66:98:f5:
88:40:75:52:a2:e2:b4:86:ba:98:9d:bc:ee:89:c7:
9c:a3:9e:39:99:34:f6:5e:91:4a:2d:8d:1a:f0:34:
3c:67:0b:42:d6:7a:ba:a8:f8:bd:54:a5:df:bb:d5:
43:d4:2e:10:42:a2:f8:1d:58:54:39:e5:21:77:f6:
ec:e3:3d:0a:36:d6:be:9f:f3:62:f7:96:8a:e0:76:
0c:93:64:d0:bf:e8:d8:46:5a:38:2e:c9:37:bb:74:
05:fa:d3:84:63:39:a8:b8:fc:2c:84:c9:70:d7:b7:
2b:1e:9e:4d:63:42:a3:77:eb:6d:d3:03:1a:95:60:
61:fe:98:a5:65:07:db:f3:2c:c3:78:b5:b3:c0:43:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:9E:A5:14:7A:1B:78:CE:D1:02:36:BF:10:0D:F1:98:90:23:19
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1MeepRR6G3jO0QI2vxAN8ZiQIxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.124.0/24
46.8.126.0/24
109.248.16.0/20
188.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
11:02:ee:07:f2:58:10:9d:20:cb:69:f9:95:b1:f5:fb:a6:f7:
8b:0d:77:80:3a:62:8b:b7:6f:a2:ea:f4:d4:65:54:53:5a:61:
c4:25:42:15:0e:11:d5:ac:14:84:43:cc:f4:86:9f:ee:e0:8c:
5e:12:96:de:cf:7d:bd:bd:9b:61:e4:08:f9:df:3d:ce:ce:22:
13:0b:4d:3a:73:10:d0:78:e1:7b:01:c7:bf:02:36:90:2c:60:
b8:95:24:39:c2:04:03:ff:fe:a8:4b:dc:d0:05:47:1f:c2:88:
52:96:22:ca:e3:f9:38:6f:c5:d6:8e:54:55:05:57:8c:e8:b0:
af:02:4d:f5:94:5e:f6:1d:bb:68:be:27:36:c9:96:4a:59:ec:
75:69:ca:e7:90:46:fb:bf:3d:ea:84:f4:3e:16:7f:5f:3e:47:
e5:3a:c7:08:b8:68:ff:35:96:4c:e7:72:67:ed:79:c5:1b:26:
4e:e5:92:5c:65:72:73:35:9e:74:9a:1f:01:72:b8:ac:34:81:
93:2c:d6:29:c2:38:96:b0:fd:f3:08:69:7f:aa:c0:c0:84:51:
35:b4:45:a9:cb:62:87:9a:e0:26:66:d2:9b:03:d7:54:eb:c0:
be:16:7b:c3:47:69:51:81:5c:dd:3c:7f:e0:7d:a8:8c:53:3c:
bf:3a:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:36 2025 by rpki-client